Privacy Policy

WeWin Casino ("WeWin", "we", "us", "our") operates the online casino and sports betting platform accessible at https://wewin.casa, serving players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of the country. We take our obligations regarding the privacy and security of your personal information extremely seriously.

This Privacy Policy ("Policy") sets out in full how WeWin collects, uses, stores, discloses, and protects the personal data of individuals who interact with our Platform, including registered players, prospective registrants, and visitors to our website. This Policy has been drafted in accordance with generally accepted principles of data protection applicable to online service operators.

This Policy should be read in conjunction with WeWin's Terms & Conditions and Responsible Gambling policy, both of which form part of your overall agreement with WeWin. In the event of any inconsistency between this Policy and the Terms & Conditions with respect to data matters, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms carry the meanings ascribed to them below:

WeWin collects the following categories of personal data from Players and platform visitors, limited to what is strictly necessary for the purposes described in this Policy:

WeWin does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data unless specifically required for identity verification purposes and with your explicit prior consent.

WeWin collects personal data through the following channels and mechanisms:

• Direct provision by you: Information you submit during account registration, deposit and withdrawal forms, KYC document uploads, live chat conversations, email correspondence, and when updating your account profile settings.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser session data, page view logs, and interaction events, via server logs and first-party cookies.
• Payment service providers: Transaction confirmation data received from Malaysian payment processors including DuitNow, FPX, Touch 'n Go eWallet infrastructure, Boost, GrabPay, and card processing networks. WeWin does not store full card numbers or eWallet credentials — only transaction reference data.
• Third-party identity verification services: Confirmation data returned by KYC verification partners following document and liveness checks during account verification procedures.
• Analytics and performance tools: Aggregated, anonymised platform usage data collected through first-party analytics scripts used to monitor platform performance and improve user experience.

WeWin processes your personal data exclusively for the following documented purposes:

1. Account creation and management: To register your account, verify your identity, maintain your account profile, and administer your ongoing player relationship with WeWin.
2. Age and identity verification (KYC): To comply with responsible gambling requirements by confirming that all players are aged 21 or above and that account information is authentic.
3. Transaction processing: To process MYR deposits and withdrawals via your chosen Malaysian payment method (including Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank transfers) and cryptocurrency transactions.
4. Platform delivery and improvement: To operate, maintain, and improve the WeWin gaming platform including live casino, slots, sports betting on Liga Super Malaysia and EPL markets, lottery, and arcade titles.
5. Customer support: To respond to your support requests, live chat enquiries, and account-related communications in a timely and effective manner.
6. Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited conduct as described in our Terms & Conditions.
7. Responsible gambling: To monitor gambling behaviour and identify patterns that may indicate problem gambling, in order to apply appropriate safeguards including deposit limits and self-exclusion where warranted.
8. Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and platform updates via your chosen contact channel, strictly limited to players who have provided explicit opt-in consent.
9. Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering regulations, respond to lawful requests from regulatory authorities, and maintain legally required records of transactions and account activity.

WeWin processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to deliver the services you have contracted for by registering an account and accepting our Terms & Conditions — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification requirements, anti-money laundering obligations, and responses to lawful requests from law enforcement or regulatory authorities.
• Legitimate interests: Processing necessary for WeWin's legitimate operational interests — including fraud detection, platform security monitoring, responsible gambling screening, and platform performance analytics — where those interests are not overridden by your rights and interests.
• Consent: Processing activities for which you have provided specific, informed, and freely given consent, including the receipt of marketing communications and promotional notifications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

WeWin shares your personal data with third parties only where strictly necessary for the purposes described in this Policy and under appropriate data protection safeguards. The categories of third parties with whom we may share your data include:

• Payment processors and financial institutions: Including Malaysian payment infrastructure providers (DuitNow, FPX, eWallet operators) and international card networks, for the purpose of processing deposits and withdrawals to and from your account.
• Identity verification partners: Third-party KYC service providers who conduct document authentication and liveness checks on our behalf to verify player age and identity.
• Technology and infrastructure providers: Cloud hosting providers, content delivery networks, and platform infrastructure partners who process data solely in accordance with WeWin's documented instructions.
• Game studio partners: Licensed international game content providers who may receive anonymised or pseudonymised session data necessary for game delivery, RTP reporting, and technical support.
• Regulatory and law enforcement authorities: Government agencies, regulators, or law enforcement bodies where disclosure is required by law, court order, or regulatory direction. WeWin will notify affected players of such disclosures where legally permitted to do so.

All third-party Data Processors engaged by WeWin are required to operate under data processing agreements that mandate compliance with applicable data protection standards and restrict their use of your data to the specific purposes for which it was shared.

WeWin operates infrastructure and engages service providers that may be located in jurisdictions outside Malaysia. Where your personal data is transferred to, stored in, or accessed from a jurisdiction outside Malaysia, WeWin takes appropriate measures to ensure an adequate level of protection is applied to your data, including:

• Contractual clauses in agreements with international Data Processors that impose data protection obligations equivalent to those applied within Malaysia;
• Transfers only to jurisdictions that maintain data protection standards recognised as adequate by applicable international frameworks; and
• Technical and organisational measures — including encryption in transit and at rest — that protect data regardless of its physical storage location.

By using the WeWin Platform, you acknowledge and consent to the international transfer of your personal data subject to the safeguards described above.

WeWin retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active accounts: Personal data associated with an active WeWin account is retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with financial recordkeeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of last account activity, in accordance with anti-money laundering record-retention obligations.
• Transaction records: Deposit, withdrawal, and wagering records are retained for a minimum of six (6) years following the transaction date for financial audit and compliance purposes.
• Support communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the communication, or longer where relevant to an ongoing dispute or regulatory investigation.
• Marketing data: Data used solely for marketing purposes is deleted or anonymised within 24 months of your last engagement with a WeWin communication, or immediately upon receipt of a valid opt-out request.
• Technical logs: Server access logs and security event data are retained for 12 months and then purged unless flagged for security investigation.

Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of individual identity.

WeWin uses cookies — small text files placed on your device — and similar technologies to operate certain Platform functions and collect performance analytics. The following categories of cookies are used:

Most browsers allow you to manage cookie preferences through their settings. Disabling strictly necessary cookies will impair your ability to access the Platform. Disabling functional or performance cookies will not prevent platform access but may reduce the quality of your experience. Please consult your browser's help documentation for guidance on managing cookies.

As a Data Subject whose personal information is processed by WeWin, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the details in Section 15:

Please note that certain rights are subject to limitations where WeWin has overriding legitimate interests or legal obligations — for example, we cannot delete transaction records that we are required to retain under anti-money laundering regulations even upon request.

WeWin employs age verification checks during account registration and KYC processes specifically to prevent access by minors. Where WeWin discovers that personal data has been submitted by or on behalf of a person under 21 years of age, we will immediately close the associated account, void all transactions conducted through it, and delete all related personal data from our systems without undue delay.

If you are a parent or guardian and believe that a person under 21 has registered an account on WeWin using your details or independently, please contact our support team immediately at the details provided in Section 15 so we can take prompt action.

WeWin implements a layered set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport encryption: All data transmitted between your device and WeWin servers is encrypted using TLS 1.2 or higher. Our domain enforces HTTPS exclusively.
• Data encryption at rest: Sensitive personal and financial data stored in our databases is encrypted using AES-256 encryption standards.
• Access controls: Internal access to player personal data is strictly limited to authorised personnel on a need-to-know basis and is logged for audit purposes.
• Two-factor authentication: Available and strongly recommended for all player accounts to prevent unauthorised login.
• Regular security assessments: WeWin conducts periodic independent security audits and penetration testing to identify and remediate vulnerabilities in our platform infrastructure.
• Incident response procedures: WeWin maintains documented data breach response procedures. In the event of a security incident that poses a risk to your personal data, we will notify affected players promptly in accordance with applicable data protection requirements.

While WeWin employs robust security practices, no system is entirely immune to risk. You are responsible for maintaining the security of your own account credentials and should notify WeWin immediately if you suspect unauthorised access to your account.

WeWin reserves the right to amend, update, or revise this Privacy Policy at any time. Where material changes are made to how we collect, use, or share your personal data, WeWin will provide advance notice to registered Players via email notification or a prominent notice on the Platform, with a minimum of 14 days' notice prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept the amendments, you must cease using the Platform and may request account closure by contacting our support team.

We encourage Players to review this Privacy Policy periodically to remain informed of how WeWin protects their personal information.

If you have questions, concerns, or requests relating to this Privacy Policy or WeWin's data protection practices, please contact our team through any of the following channels:

WeWin serves players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions. All data-related correspondence will be acknowledged within 48 hours and resolved within 30 days of receipt of a complete and valid request.

For responsible gambling support or self-exclusion requests, please visit our dedicated Responsible Gambling page. For questions about bonus terms or account policies, please refer to our Terms & Conditions or visit our FAQ page.